More easier just copy the NanoBSD image to your USB stick, and import your config into that.

@Waldoman: @cmb: The upgrade didn't fully complete. Bring up the console, go to option 8, and run: chown -R root:wheel / Then reboot. It'll be fine after booting back up again. This worked, Thank you so much, been fighting with it. Thanks it works for me too Just don't forget to clean your browser cache before going into openvpn server ;)

Yes, you're pointing at the amd64 repo. It's safe. Steve

Thanks to all. I got it working now.  8)

@johnpoz: so your blocking only udp 443, that would explain why https works. perhaps.. as you can tell I know very little about this… but all I know is that at this point the issue I was having with Avast DNS is corrected  8)

Many thanks for the responses, this has helped me a lot. The Squid files - mainly the cache state was the primary issue.  These remained post uninstall of the package.  I think there might have been uninstall options to keep the cache etc ? I checked the Suricate logs and I think that at some point, the log trimming was not working correctly - even though theoretically the GUI showed trimming enabled.  I re-applied the settings and the logs for Suricate appear to be trimming properly now. Really appreciate the great help of forum members.

try to delete the cache and history then make sure you accept the unknown certificate also what version of chrome do you  have? Recently chrome been having issues especially with Hikvision addon

Hi all. I'm struggling with this. When I add the two lines I end up seeing the error Parse error: syntax error, unexpected 'else' (T_ELSE) in /etc/inc/unbound.inc on line 257 When I visit services->DNS Resolver. At this point the resolver will not start and I have to use the forwarder.  This is on the serial I386 2.2.2 install.

I already linked the bug. Do a clean install and move on. Really a no brainer with VMs.

"How do I fix this so DNS Resolver works and uses OpenDNS for name resolution?" Simple troubleshooting.  So can your client behind pfsense query opendns?  Can your clients behind pfsense query the roots?  Or any other name servers? What do you have the resolver listing on?  Are you really using the resolver or do you have it in forwarding mode?  Can pfsense?

Why don't you just look at the permissions of the current ones? E.g. $ ls -l /usr/local/www/themes/pfsense_ng_fs/ total 150 -rw-r--r--  1 root  wheel  29014 May  5 04:22 all.css -rw-r--r--  1 root  wheel  28792 Aug 25  2014 all.css.orig -rwxr-xr-x  1 root  wheel  4068 May  5 04:22 apple-touch-icon.png -rw-r--r--  1 root  wheel    349 May  5 04:22 bottom-loader.js -rw-r--r--  1 root  wheel  1406 May  5 04:22 favicon.ico -rw-r--r--  1 root  wheel  1218 May  5 04:22 graphlink.css drwxr-xr-x  5 root  wheel  1024 May  5 13:19 images drwxr-xr-x  4 root  wheel    512 May  5 13:19 javascript drwxr-xr-x  2 root  wheel    512 May  5 13:19 jsevents -rw-r--r--  1 root  wheel  9478 May  5 04:22 loader.js -rw-r--r--  1 root  wheel  21297 May  5 04:22 login.css -rw-r--r--  1 root  wheel  6856 May  5 04:22 menu.inc -rw-r--r--  1 root  wheel  3726 May  5 04:22 new_tab_menu.css -rw-r--r--  1 root  wheel    10 May  5 04:22 no_big_logo -rw-r--r--  1 root  wheel  3962 May  5 04:22 rrdcolors.inc.php drwxr-xr-x  2 root  wheel    512 May  5 13:19 styles -rw-r--r--  1 root  wheel  21003 May  5 04:22 wizard.css

use pfblockerNG or use the firewall to block all https sites and let squidGuard block http use http://www.tcpiputils.com/browse/as/32934 copy all the facebook IP CIDR ex:31.13.71.0/24

@Escorpiom: What you want is a transparent bridge. You can't route in the scenario you described. You would have to configure two different subnets. If PfSense can work as a transparent bridge, then you may be able to use some of the functions it offers. Cheers. ok, that makes sense.  i just wanted to make sure there wasn't an easier way of doing it.  thanks for the reply.